Passwords and more How to cope with computer passwords and avoid identity theft You can download this from Mark Cross

Passwords ● They are important ● Why ● The most important after your bank login details are your ● Had an from a friend in holiday who has their wallet and passport stolen? – Stranded Traveler Appeal Scams – scams.html

XKCD No. 936

So words are better ● Up to point ● Web sites still catching up – Many only allowing so many letters (characters) – And blocking the use of punctuation ● Mistakes made every year – Sony 2011 – 1 Million usernames & passwords – Target 2013 – 40 million credit cards

Passwords ● Have to be hard and fit for purpose – – Passwords and Access → Website Password ● Ideas and tools can be found on this page

Mark Burnett’s six rules ● Password, 1234, letmein, and anything else that you see on this common passwords cloud are not passwords ● If you google your password and get more than 10,000 results, it is not a password ● If your password is 8 characters or less, it is not a password ● If you use it on multiple sites, it is no longer a password ● If a password is older than 3 years, it has expired and is no longer a password ● If you tell someone your password, it is no longer a password

Password/Passphrase ● What can go into most password systems? ● These are called characters NOT letters ● Letters are only A-Z and a-z ● Characters include numbers 0-9 ● Characters SHOULD but don't always include ● -+!”£$%^&*()-=., ● This is a security weakness of many sites

Ideas for passphrases ● Things that nearly only you know ➢ What was your first car? ➢ What was the colour? ➢ Which year did you buy or get given it? ➢ The publishing date of your favourite novel? ➢ What food do you not like? ➢ Put punctuation characters in

KeePass ● Use a password manager – Back the password file up – Most passwords can be reset by ● Write down the master password! ● Most techies use KeePass –

Identity Theft ● How to protect yourself ● Three major UK credit agencies ● Notice of correction –